/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.256 - (hide annotations) (download)
Sat Nov 15 18:15:21 2008 UTC (6 years ago) by gengor
Branch: MAIN
Changes since 1.255: +5 -1 lines
Stable 2.6.25-r10 on amd64/x86
(Portage version: 2.1.4.5)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 phreak 1.204 # Copyright 2000-2008 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.256 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.255 2008/11/12 19:27:34 gengor Exp $
4    
5     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
6     hardened-sources-2.6.25-r10.ebuild:
7     Stable amd64/x86.
8 gengor 1.255
9     *hardened-sources-2.6.26-r6 (12 Nov 2008)
10    
11     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
12     +hardened-sources-2.6.26-r6.ebuild:
13     Bump to Linux 2.6.26.8 and fix security bug #245650.
14 gengor 1.254
15     *hardened-sources-2.6.25-r10 (12 Nov 2008)
16    
17     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
18     +hardened-sources-2.6.25-r10.ebuild:
19     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
20 gengor 1.253
21     *hardened-sources-2.6.27-r1 (09 Nov 2008)
22    
23     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
24     +hardened-sources-2.6.27-r1.ebuild:
25     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
26 gengor 1.252
27     *hardened-sources-2.6.27 (04 Nov 2008)
28    
29     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
30     +hardened-sources-2.6.27.ebuild:
31     Initial 2.6.27 release.
32 gengor 1.251
33     *hardened-sources-2.6.26-r5 (03 Nov 2008)
34    
35     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
36     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
37     +hardened-sources-2.6.26-r5.ebuild:
38     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
39     Clean out some old versions.
40 nixnut 1.250
41     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
42     Stable on ppc
43 gengor 1.249
44     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
45     hardened-sources-2.6.25-r9.ebuild:
46     Stable on amd64/x86.
47 gengor 1.248
48     *hardened-sources-2.6.25-r9 (26 Oct 2008)
49    
50     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
51     +hardened-sources-2.6.25-r9.ebuild:
52     Update to Linux 2.6.25.19
53 nixnut 1.247
54     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
55     Stable on ppc
56 gengor 1.246
57     *hardened-sources-2.6.26-r4 (14 Oct 2008)
58    
59     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
60     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
61     Update to latest grsecurity patch, fixing building of non-modular kernels.
62 gengor 1.245
63     *hardened-sources-2.6.26-r3 (12 Oct 2008)
64    
65     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
66     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
67     +hardened-sources-2.6.26-r3.ebuild:
68     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
69     2.6.26-r1: Removed.
70     2.6.25-r8: Stable amd64/x86.
71 gengor 1.244
72     *hardened-sources-2.6.25-r8 (09 Oct 2008)
73    
74     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
75     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
76     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
77     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
78 nixnut 1.243
79     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
80     Stable on ppc
81 gengor 1.242
82     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
83     hardened-sources-2.6.25-r7.ebuild:
84     Stable amd64/x86.
85 gengor 1.241
86     *hardened-sources-2.6.26-r2 (13 Sep 2008)
87    
88     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
89     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
90     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
91     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
92 gengor 1.240
93     *hardened-sources-2.6.25-r7 (13 Sep 2008)
94    
95     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
96     +hardened-sources-2.6.25-r7.ebuild:
97     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
98 gengor 1.239
99     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
100     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
101     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
102     hardened-sources-2.6.26-r1.ebuild:
103     Update DESCRIPTION and HGPV_URI.
104 gengor 1.238
105     *hardened-sources-2.6.25-r6 (09 Sep 2008)
106    
107     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
108     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
109     2.6.25-r6: Update to Linux 2.6.25.17.
110     2.6.24-r3: Removed.
111 gengor 1.237
112     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
113     hardened-sources-2.6.25-r5.ebuild:
114     Stable on amd64/x86
115 gengor 1.236
116     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
117     Update my email address.
118 nixnut 1.235
119     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
120     stable on ppc
121 battousai 1.234
122     *hardened-sources-2.6.26-r1 (23 Aug 2008)
123     *hardened-sources-2.6.25-r5 (23 Aug 2008)
124    
125     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
126     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
127     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
128     +hardened-sources-2.6.26-r1.ebuild:
129     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
130     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
131     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
132     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
133     (gengor).
134 solar 1.233
135     *hardened-sources-2.6.26 (18 Aug 2008)
136     *hardened-sources-2.6.25-r4 (18 Aug 2008)
137    
138     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
139     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
140     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
141     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
142     2.6.25-r2: Removed.
143 tove 1.232
144     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
145     Remove phreak from metadata.xml (#96398)
146 solar 1.231
147     *hardened-sources-2.6.25-r3 (31 Jul 2008)
148    
149     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
150     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
151     +hardened-sources-2.6.25-r3.ebuild:
152     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
153     fixes, including security bug #231750.
154 nixnut 1.230
155     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
156     Stable on ppc
157 solar 1.229
158     *hardened-sources-2.6.25-r2 (05 Jul 2008)
159    
160     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
161     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
162     +hardened-sources-2.6.25-r2.ebuild:
163     2.6.23-r4: Stable x86/amd64
164     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
165     2.6.23-r{11,12}: Removed due to multiple vulns.
166     (gengor & kerframil)
167 nixnut 1.228
168     04 Jul 2008; nixnut <nixnut@gentoo.org>
169     hardened-sources-2.6.23-r13.ebuild:
170     Stable on ppc
171 solar 1.227
172     *hardened-sources-2.6.25-r1 (30 Jun 2008)
173    
174     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
175     +hardened-sources-2.6.25-r1.ebuild:
176     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
177     grsecurity release. 2.6.23-r13: x86/amd64 stable
178 solar 1.226
179     *hardened-sources-2.6.25 (17 Jun 2008)
180     *hardened-sources-2.6.24-r3 (17 Jun 2008)
181     *hardened-sources-2.6.23-r13 (17 Jun 2008)
182    
183     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
184     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
185     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
186     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
187     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
188     2.6.25: Initial 2.6.25 release.
189 solar 1.225
190     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
191     - fasttrack to stable x86/amd64
192 swegener 1.224
193     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
194     Fix broken digest for linux-2.6.24.tar.bz2.
195 solar 1.223
196     *hardened-sources-2.6.24-r2 (11 May 2008)
197     *hardened-sources-2.6.23-r12 (11 May 2008)
198    
199     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
200     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
201     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
202     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
203     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
204     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
205     security bugs 219901, 220691, 220975, 220979, 221123. New
206     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
207     should be removed as far as I'm concerned, everything else remove due to
208     vulnerable to numerous security bugs or brokeness.
209 nixnut 1.222
210     10 May 2008; nixnut <nixnut@gentoo.org>
211     hardened-sources-2.6.23-r11.ebuild:
212     Stable on ppc
213 solar 1.221
214     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
215     - -r11 stable on x86/amd64
216 solar 1.220
217     *hardened-sources-2.6.23-r11 (01 May 2008)
218    
219     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
220     - version bump to fix ulgy linux bugs
221 phreak 1.219
222     *hardened-sources-2.6.24-r1 (30 Apr 2008)
223    
224     30 Apr 2008; Christian Heim <phreak@gentoo.org>
225     +hardened-sources-2.6.24-r1.ebuild:
226     Revision bump (thanks to Kerin and Gordon, again), pulling
227     genpatches-2.6.24-7, solving #219089. Additionally contains further security
228     fixes plus some minor updates.
229 phreak 1.218
230     *hardened-sources-2.6.23-r10 (30 Apr 2008)
231    
232     30 Apr 2008; Christian Heim <phreak@gentoo.org>
233     +hardened-sources-2.6.23-r10.ebuild:
234     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
235     Additional contains "various other fixes".
236 phreak 1.217
237     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
238     Update the longdescription in metadata, thanks to Gordon Malm.
239 nixnut 1.216
240     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
241     Stable on ppc wrt bug #213255
242 solar 1.215
243     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
244     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
245     - stable on x86/amd64 per request. Removed obsolete ebuilds
246 phreak 1.214
247     *hardened-sources-2.6.24 (07 Apr 2008)
248    
249     07 Apr 2008; Christian Heim <phreak@gentoo.org>
250     +hardened-sources-2.6.24.ebuild:
251     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
252     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
253     for the many contributions and their continued effort in #216612) based on
254     2.6.24 and genpatches-2.6.24-5.
255    
256     The current ebuild/patchset contains these things:
257     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
258     * Introduces bespoke server and workstation oriented security levels
259     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
260 phreak 1.213
261     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
262     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
263     maintaining it).
264 phreak 1.212
265     24 Mar 2008; Christian Heim <phreak@gentoo.org>
266     hardened-sources-2.4.35-r2.ebuild:
267     Fixing SRC_URI for 2.4.35-r2.
268 phreak 1.211
269     *hardened-sources-2.6.23-r9 (22 Mar 2008)
270    
271     22 Mar 2008; Christian Heim <phreak@gentoo.org>
272     +hardened-sources-2.6.23-r9.ebuild:
273     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
274     * Change the default GIDs for some grsecurity options
275     * Revamp the Hardened [Gentoo] security level and make it the default level
276     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
277     * Fix a recursive lock -- call to capable() within ptrace_attach()
278     * Fix bug that allows audit and iscsi operations to be controlled via netlink
279 solar 1.210
280     *hardened-sources-2.6.23-r8 (27 Feb 2008)
281    
282     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
283     - version bump from Kerin Millar bug 210026
284 solar 1.209
285     17 Feb 2008; <solar@gentoo.org> metadata.xml,
286     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
287     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
288     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
289     - stable on x86 and remove old ebuilds
290 solar 1.207
291     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
292 solar 1.208 - stable on amd64 per request of amd64 lead
293 solar 1.206
294     *hardened-sources-2.6.23-r7 (11 Feb 2008)
295    
296     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
297     - version bump from kerin.millar
298     Changes:
299    
300     * Bump to genpatches-base-2.6.23-9
301     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
302     * Disables COMPAT_VDSO in x86/defconfig
303     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
304 phreak 1.205
305     25 Jan 2008; Christian Heim <phreak@gentoo.org>
306     -hardened-sources-2.6.22-r8.ebuild:
307     Cleaning up old versions.
308 phreak 1.204
309     *hardened-sources-2.6.23-r6 (25 Jan 2008)
310    
311     25 Jan 2008; Christian Heim <phreak@gentoo.org>
312     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
313     Revision bump, pulling in the latest genpatches.
314 phreak 1.203
315     *hardened-sources-2.6.23-r5 (24 Dec 2007)
316    
317     24 Dec 2007; Christian Heim <phreak@gentoo.org>
318     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
319     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
320     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
321     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
322 phreak 1.202
323     24 Dec 2007; Christian Heim <phreak@gentoo.org>
324     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
325     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
326     -hardened-sources-2.6.23-r3.ebuild:
327     Cleaning out some unused, old versions.
328 phreak 1.201
329     24 Dec 2007; Christian Heim <phreak@gentoo.org>
330     hardened-sources-2.6.23-r4.ebuild:
331     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
332     in the tree for long, but there isn't much of a difference between this and
333     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
334 phreak 1.200
335     *hardened-sources-2.6.23-r4 (23 Dec 2007)
336    
337     23 Dec 2007; Christian Heim <phreak@gentoo.org>
338     +hardened-sources-2.6.23-r4.ebuild:
339     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
340 phreak 1.199
341     *hardened-sources-2.6.23-r3 (04 Dec 2007)
342    
343     04 Dec 2007; Christian Heim <phreak@gentoo.org>
344     +hardened-sources-2.6.23-r3.ebuild:
345     Revision bump, pulling in 2.6.23.9.
346 phreak 1.198
347     *hardened-sources-2.6.23-r2 (25 Nov 2007)
348    
349     25 Nov 2007; Christian Heim <phreak@gentoo.org>
350     +hardened-sources-2.6.23-r2.ebuild:
351     Updated patchset, thanks to solar.
352 phreak 1.197
353     *hardened-sources-2.6.23-r1 (31 Oct 2007)
354    
355     31 Oct 2007; Christian Heim <phreak@gentoo.org>
356     +hardened-sources-2.6.23-r1.ebuild:
357     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
358 solar 1.196
359     29 Oct 2007; <solar@gentoo.org> metadata.xml:
360     - update metadata.xml
361 phreak 1.195
362     25 Oct 2007; Christian Heim <phreak@gentoo.org>
363     hardened-sources-2.6.22-r8.ebuild:
364     Marking 2.6.22-r8 stable on amd64 and x86.
365 phreak 1.194
366     21 Oct 2007; Christian Heim <phreak@gentoo.org>
367     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
368     -hardened-sources-2.6.21-r4.ebuild:
369     Removing old ebuilds.
370 phreak 1.193
371     *hardened-sources-2.4.35-r2 (21 Oct 2007)
372    
373     21 Oct 2007; Christian Heim <phreak@gentoo.org>
374     +hardened-sources-2.4.35-r2.ebuild:
375     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
376     patches.
377 phreak 1.192
378     *hardened-sources-2.6.22-r8 (21 Oct 2007)
379    
380     21 Oct 2007; Christian Heim <phreak@gentoo.org>
381     +hardened-sources-2.6.22-r8.ebuild:
382     Yet another new patch, hopefully fixing the remaining issues we had w/
383     2.6.22. Candidate for stabling.
384 phreak 1.191
385     *hardened-sources-2.6.23 (13 Oct 2007)
386    
387     13 Oct 2007; Christian Heim <phreak@gentoo.org>
388     +hardened-sources-2.6.23.ebuild:
389     Initial hardened-sources-2.6.23. If people still have problems w/ bug
390     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
391 phreak 1.190
392     11 Oct 2007; Christian Heim <phreak@gentoo.org>
393     hardened-sources-2.6.20-r10.ebuild:
394     Pulling in yet another new genpatches version, fixing the PWC bug for real.
395 phreak 1.189
396     04 Oct 2007; Christian Heim <phreak@gentoo.org>
397     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
398     Removing old versions.
399 phreak 1.188
400     *hardened-sources-2.6.22-r7 (01 Oct 2007)
401    
402     01 Oct 2007; Christian Heim <phreak@gentoo.org>
403     +hardened-sources-2.6.22-r7.ebuild:
404     Revision bump, pulling in a newer patch. Should fix #194276.
405 phreak 1.187
406     30 Sep 2007; Christian Heim <phreak@gentoo.org>
407     hardened-sources-2.6.20-r10.ebuild:
408     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
409     Mike Doty).
410 phreak 1.186
411     *hardened-sources-2.6.22-r6 (26 Sep 2007)
412    
413     26 Sep 2007; Christian Heim <phreak@gentoo.org>
414     +hardened-sources-2.6.22-r6.ebuild:
415     Revision bump, grabbing up till Linux 2.6.22.9.
416 phreak 1.185
417     24 Sep 2007; Christian Heim <phreak@gentoo.org>
418     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
419     Cleaning up further.
420 phreak 1.184
421     *hardened-sources-2.6.20-r10 (24 Sep 2007)
422    
423     24 Sep 2007; Christian Heim <phreak@gentoo.org>
424     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
425     +hardened-sources-2.6.20-r10.ebuild:
426     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
427     revisions.
428 phreak 1.183
429     *hardened-sources-2.6.22-r5 (22 Sep 2007)
430    
431     22 Sep 2007; Christian Heim <phreak@gentoo.org>
432     +hardened-sources-2.6.22-r5.ebuild:
433     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
434 phreak 1.182
435     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
436     Removing johnm from metadata.xml (see #186467 for reference).
437 phreak 1.181
438     *hardened-sources-2.6.22-r4 (17 Sep 2007)
439    
440     17 Sep 2007; Christian Heim <phreak@gentoo.org>
441     +hardened-sources-2.6.22-r4.ebuild:
442     Revision bump, hopefully fixing all those weird PAX failures.
443 phreak 1.180
444     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
445     Updating the metadata.xml.
446 phreak 1.179
447     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
448     Removing tocharian from metadata due to his retirement (see #71718 for
449     reference).
450 phreak 1.178
451     *hardened-sources-2.6.20-r9 (30 Aug 2007)
452    
453     30 Aug 2007; Christian Heim <phreak@gentoo.org>
454     +hardened-sources-2.6.20-r9.ebuild:
455     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
456 phreak 1.177
457     29 Aug 2007; Christian Heim <phreak@gentoo.org>
458     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
459     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
460     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
461     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
462     -hardened-sources-2.6.22-r2.ebuild:
463     Removing some redundant versions.
464 phreak 1.176
465     *hardened-sources-2.4.35-r1 (29 Aug 2007)
466    
467     29 Aug 2007; Christian Heim <phreak@gentoo.org>
468     +hardened-sources-2.4.35-r1.ebuild:
469     Revision bump, new grsecurity patch.
470 phreak 1.175
471     *hardened-sources-2.6.20-r8 (26 Aug 2007)
472    
473     26 Aug 2007; Christian Heim <phreak@gentoo.org>
474     +hardened-sources-2.6.20-r8.ebuild:
475     Revision bump for Linux 2.6.20.17.
476 phreak 1.174
477     *hardened-sources-2.6.22-r3 (22 Aug 2007)
478    
479     22 Aug 2007; Christian Heim <phreak@gentoo.org>
480     +hardened-sources-2.6.22-r3.ebuild:
481     Revision bump for Linux 2.6.22.4.
482 phreak 1.173
483     16 Aug 2007; Christian Heim <phreak@gentoo.org>
484     hardened-sources-2.6.22-r2.ebuild:
485     Updated patchset, to fix the alignment against 2.6.22.3.
486 phreak 1.172
487     *hardened-sources-2.6.22-r2 (16 Aug 2007)
488    
489     16 Aug 2007; Christian Heim <phreak@gentoo.org>
490     +hardened-sources-2.6.22-r2.ebuild:
491     Revision bump for Linux 2.6.22.3.
492 phreak 1.171
493     *hardened-sources-2.4.35 (16 Aug 2007)
494    
495     16 Aug 2007; Christian Heim <phreak@gentoo.org>
496     +hardened-sources-2.4.35.ebuild:
497     Version bump, initial version for Linux 2.4.35.
498 phreak 1.170
499     *hardened-sources-2.6.21-r4 (16 Aug 2007)
500    
501     16 Aug 2007; Christian Heim <phreak@gentoo.org>
502     +hardened-sources-2.6.21-r4.ebuild:
503     Revision bump for Linux 2.6.21.6.
504 phreak 1.169
505     *hardened-sources-2.6.20-r7 (16 Aug 2007)
506    
507     16 Aug 2007; Christian Heim <phreak@gentoo.org>
508     +hardened-sources-2.6.20-r7.ebuild:
509     Revision bump for Linux 2.6.20.16.
510 phreak 1.168
511     *hardened-sources-2.6.22-r1 (13 Aug 2007)
512    
513     13 Aug 2007; Christian Heim <phreak@gentoo.org>
514     +hardened-sources-2.6.22-r1.ebuild:
515     Yet another revision bump.
516 phreak 1.167
517     *hardened-sources-2.6.22 (10 Aug 2007)
518    
519     10 Aug 2007; Christian Heim <phreak@gentoo.org>
520     +hardened-sources-2.6.22.ebuild:
521     Initial release for 2.6.22. If you are using hardened-sources on a desktop
522     machine (P4 or newer), be aware you might need to disable
523     CONFIG_PAX_PAGEEXEC.
524 phreak 1.166
525     04 Aug 2007; Christian Heim <phreak@gentoo.org>
526     hardened-sources-2.6.20-r6.ebuild:
527     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
528     2.6.20.15.
529 phreak 1.165
530     10 Jul 2007; Christian Heim <phreak@gentoo.org>
531     hardened-sources-2.6.20-r5.ebuild:
532     Marking hardened-sources-2.6.20-r5 stable on ppc.
533 phreak 1.164
534     10 Jul 2007; Christian Heim <phreak@gentoo.org>
535     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
536     Cleanup.
537 phreak 1.163
538     *hardened-sources-2.6.20-r6 (08 Jul 2007)
539    
540     08 Jul 2007; Christian Heim <phreak@gentoo.org>
541     +hardened-sources-2.6.20-r6.ebuild:
542     Revision bump, grabbing yet another stable release.
543 phreak 1.162
544     17 Jun 2007; Christian Heim <phreak@gentoo.org>
545     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
546     -hardened-sources-2.6.21-r2.ebuild:
547     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
548     alpha stable KEYWORD by mistake.
549 phreak 1.161
550     17 Jun 2007; Christian Heim <phreak@gentoo.org>
551     hardened-sources-2.6.20-r5.ebuild:
552     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
553     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
554 phreak 1.160
555     *hardened-sources-2.6.21-r3 (12 Jun 2007)
556    
557     12 Jun 2007; Christian Heim <phreak@gentoo.org>
558     +hardened-sources-2.6.21-r3.ebuild:
559     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
560     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
561     love.
562 phreak 1.159
563     *hardened-sources-2.6.20-r5 (11 Jun 2007)
564    
565     11 Jun 2007; Christian Heim <phreak@gentoo.org>
566     +hardened-sources-2.6.20-r5.ebuild:
567     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
568     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
569     love.
570 pappy 1.158
571     *hardened-sources-2.4.34.5 (11 Jun 2007)
572    
573     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
574     +hardened-sources-2.4.34.5.ebuild:
575     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
576 phreak 1.157
577     30 May 2007; Christian Heim <phreak@gentoo.org>
578     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
579     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
580     stale ebuild(s).
581 phreak 1.156
582     30 May 2007; Christian Heim <phreak@gentoo.org>
583     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
584     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
585     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
586     Doing some cleanups, remove stale ebuilds.
587 phreak 1.155
588     26 May 2007; Christian Heim <phreak@gentoo.org>
589     hardened-sources-2.6.21-r2.ebuild:
590     Fixing the grsecurity patch, had one '};' too much.
591 phreak 1.154
592     *hardened-sources-2.6.21-r2 (26 May 2007)
593    
594     26 May 2007; Christian Heim <phreak@gentoo.org>
595     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
596     +hardened-sources-2.6.21-r2.ebuild:
597     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
598     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
599 phreak 1.153
600     *hardened-sources-2.6.20-r4 (26 May 2007)
601    
602     26 May 2007; Christian Heim <phreak@gentoo.org>
603     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
604     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
605 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
606 phreak 1.152
607     15 May 2007; Christian Heim <phreak@gentoo.org>
608     hardened-sources-2.6.20-r3.ebuild:
609     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
610     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
611     grsecurity patch fail in that exact same hunk.
612 phreak 1.151
613     *hardened-sources-2.6.20-r3 (15 May 2007)
614    
615     15 May 2007; Christian Heim <phreak@gentoo.org>
616     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
617     Revision bump, incorporating Linux 2.6.20.11.
618    
619     *hardened-sources-2.6.21-r1 (11 May 2007)
620    
621     11 May 2007; Christian Heim <phreak@gentoo.org>
622     +hardened-sources-2.6.21-r1.ebuild:
623     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
624     mentioned in #177234.
625 kevquinn 1.150
626     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
627     files/digest-hardened-sources-2.6.21, Manifest:
628     Fix Manifest/digest for linux-2.6.21.tar.bz2
629 phreak 1.149
630     06 May 2007; Christian Heim <phreak@gentoo.org>
631     hardened-sources-2.6.21.ebuild:
632     Bumping the hardened-patches version, needed for the fix for #177234.
633 phreak 1.148
634     *hardened-sources-2.6.21 (02 May 2007)
635    
636     02 May 2007; Christian Heim <phreak@gentoo.org>
637     +hardened-sources-2.6.21.ebuild:
638     Version bump, Linux 2.6.21-hardened.
639 phreak 1.147
640     29 Apr 2007; Christian Heim <phreak@gentoo.org>
641     hardened-sources-2.6.20-r2.ebuild:
642     Adding ~ia64 on Ned's request.
643 phreak 1.146
644     29 Apr 2007; Christian Heim <phreak@gentoo.org>
645     hardened-sources-2.6.20-r2.ebuild:
646     Fixing the included grsecurity patch, wasn't alligning due to the Index:
647     header line(s).
648 phreak 1.145
649     29 Apr 2007; Christian Heim <phreak@gentoo.org>
650     hardened-sources-2.6.20-r2.ebuild:
651     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
652 armin76 1.144
653     *hardened-sources-2.6.20-r2 (10 Apr 2007)
654    
655     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
656     +hardened-sources-2.6.20-r2.ebuild:
657     Version bump, on behalf of phreak
658 phreak 1.143
659     *hardened-sources-2.6.20-r1 (04 Apr 2007)
660    
661     04 Apr 2007; Christian Heim <phreak@gentoo.org>
662     +hardened-sources-2.6.20-r1.ebuild:
663     Revision bump, grabbing a newer grsecurity snapshot.
664 phreak 1.142
665     *hardened-sources-2.6.20 (25 Mar 2007)
666    
667     25 Mar 2007; Christian Heim <phreak@gentoo.org>
668     +hardened-sources-2.6.20.ebuild:
669     Finally a hardened-sources version for 2.6.20; many people have been waiting
670     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
671     testbox.
672 chainsaw 1.141
673     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
674     hardened-sources-2.6.18-r6.ebuild:
675     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
676 phreak 1.140
677     *hardened-sources-2.6.18-r6 (16 Mar 2007)
678    
679     16 Mar 2007; Christian Heim <phreak@gentoo.org>
680     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
681     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
682     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
683     supposed to be.
684 phreak 1.139
685     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
686     Fixing the Manifest, the previous one was broken (as in still had the
687     deleted ebuild in it).
688 phreak 1.138
689     06 Mar 2007; Christian Heim <phreak@gentoo.org>
690     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
691     +hardened-sources-2.6.18-r5.ebuild:
692     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
693     Linux 2.6.18.8. Also cleaning up the older version.
694    
695     *hardened-sources-2.6.18-r5 (06 Mar 2007)
696    
697     06 Mar 2007; Christian Heim <phreak@gentoo.org>
698     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
699     +hardened-sources-2.6.18-r5.ebuild:
700     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
701     Linux 2.6.18.8. Also cleaning up the older version.
702 phreak 1.137
703     24 Feb 2007; Christian Heim <phreak@gentoo.org>
704     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
705     -hardened-sources-2.6.19-r5.ebuild:
706     Removing some of the old version, that didn't work.
707 phreak 1.136
708     *hardened-sources-2.6.19-r6 (12 Feb 2007)
709    
710     12 Feb 2007; Christian Heim <phreak@gentoo.org>
711     +hardened-sources-2.6.19-r6.ebuild:
712     Revision bump, including a new grsec version fixing #166235.
713 pappy 1.134
714     *hardened-sources-2.4.34 (24 Jan 2007)
715    
716     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
717 pappy 1.135 Manifest:
718     updating Manifest with checksums of new tarball and ebuild
719    
720     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
721 pappy 1.134 +hardened-sources-2.4.34.ebuild:
722     I added new hardened sources 2.4 update, this is a critical path
723     security bugfix - all users of h-s are strongly advised
724     to update their existing hardened sources to this version.
725     It contains a fix for a kernel vulnerability that is pertaining
726     to the PaX changes to virtual memory management, possibly leading
727     to a local kernel exploit ... see grsecurity.net forums and homepage
728 phreak 1.133
729     23 Jan 2007; Christian Heim <phreak@gentoo.org>
730     files/digest-hardened-sources-2.6.19-r5, Manifest:
731     Fixing the patch-tarball digest.
732 phreak 1.132
733     *hardened-sources-2.6.19-r5 (23 Jan 2007)
734    
735     23 Jan 2007; Christian Heim <phreak@gentoo.org>
736     +hardened-sources-2.6.19-r5.ebuild:
737     Revision bump, closing the recently discovered PaX expand_stack()
738     vulnerability.
739 phreak 1.131
740     *hardened-sources-2.6.19-r4 (14 Jan 2007)
741    
742     14 Jan 2007; Christian Heim <phreak@gentoo.org>
743     +hardened-sources-2.6.19-r4.ebuild:
744     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
745     dropping the randomized PID feature.
746 opfer 1.130
747     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
748     hardened-sources-2.4.33.4.ebuild:
749     stable x86, bug #161171
750 phreak 1.129
751     *hardened-sources-2.6.19-r3 (27 Dec 2006)
752    
753     27 Dec 2006; Christian Heim <phreak@gentoo.org>
754     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
755     Revision bump for bug #157186 and #158786.
756 phreak 1.128
757     *hardened-sources-2.6.18-r4 (27 Dec 2006)
758    
759     27 Dec 2006; Christian Heim <phreak@gentoo.org>
760     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
761     Revision bump for bug #157186.
762 phreak 1.127
763     *hardened-sources-2.6.19-r2 (23 Dec 2006)
764    
765     23 Dec 2006; Christian Heim <phreak@gentoo.org>
766     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
767     Revision bump to pull in genpatches-2.6.19-3 for #157186.
768 phreak 1.126
769     17 Dec 2006; Christian Heim <phreak@gentoo.org>
770     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
771     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
772     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
773     hardened-sources-2.6.19-r1.ebuild:
774     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
775     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
776 pappy 1.125
777     *hardened-sources-2.4.33.4 (17 Dec 2006)
778    
779     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
780     +hardened-sources-2.4.33.4.ebuild:
781     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
782     and quilting
783 phreak 1.124
784     *hardened-sources-2.6.19-r1 (14 Dec 2006)
785    
786     14 Dec 2006; Christian Heim <phreak@gentoo.org>
787     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
788     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
789     for reporting).
790 phreak 1.123
791     *hardened-sources-2.6.19 (13 Dec 2006)
792    
793     13 Dec 2006; Christian Heim <phreak@gentoo.org>
794     +hardened-sources-2.6.19.ebuild:
795     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
796     Brad for providing that prompt update.
797 phreak 1.122
798     *hardened-sources-2.6.18-r3 (13 Dec 2006)
799    
800     13 Dec 2006; Christian Heim <phreak@gentoo.org>
801     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
802     +hardened-sources-2.6.18-r3.ebuild:
803     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
804     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
805 phreak 1.121
806     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
807     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
808 nixnut 1.120
809     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
810     Stable on ppc wrt bug 157356
811 opfer 1.119
812     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
813     hardened-sources-2.6.18.ebuild:
814     stable x86, bug #157356
815 phreak 1.118
816     *hardened-sources-2.6.18-r2 (06 Dec 2006)
817    
818     06 Dec 2006; Christian Heim <phreak@gentoo.org>
819     +hardened-sources-2.6.18-r2.ebuild:
820     Revision bump, including 2.6.18.5 (via genpatches) and
821     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
822     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
823     redesign.
824 phreak 1.117
825     06 Dec 2006; Christian Heim <phreak@gentoo.org>
826     hardened-sources-2.6.18.ebuild:
827     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
828     of Mike Doty).
829 phreak 1.116
830     *hardened-sources-2.6.18-r1 (23 Nov 2006)
831    
832     23 Nov 2006; Christian Heim <phreak@gentoo.org>
833     +hardened-sources-2.6.18-r1.ebuild:
834     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
835 phreak 1.115
836     *hardened-sources-2.6.18 (11 Nov 2006)
837    
838     11 Nov 2006; Christian Heim <phreak@gentoo.org>
839     +hardened-sources-2.6.18.ebuild:
840     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
841 solar 1.114
842     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
843     - mark amd64 stable also. bug #151877
844 solar 1.113
845     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
846     - mark 2.6.17-r1 stable
847 phreak 1.112
848     27 Aug 2006; Christian Heim <phreak@gentoo.org>
849     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
850     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
851 phreak 1.111
852     *hardened-sources-2.6.17-r1 (26 Aug 2006)
853    
854     26 Aug 2006; Christian Heim <phreak@gentoo.org>
855     +hardened-sources-2.6.17-r1.ebuild:
856     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
857     grsecurity patch.
858 phreak 1.110
859     *hardened-sources-2.6.17 (17 Aug 2006)
860    
861     17 Aug 2006; Christian Heim <phreak@gentoo.org>
862     +hardened-sources-2.6.17.ebuild:
863     Bumping the hardened-sources-2.6 series to 2.6.17, using
864     genpatches-2.6.17-6.base.
865 solar 1.109
866     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
867     - stable on x86 and amd64
868 solar 1.108
869     *hardened-sources-2.6.16-r11 (15 Jul 2006)
870    
871     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
872     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
873     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
874     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
875     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
876     crusty ebuilds
877 johnm 1.107
878     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
879     hardened-sources-2.6.16-r10.ebuild:
880     marking stable on x86 and amd64
881 solar 1.106
882     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
883     - 2.4.32-r6 stable on x86. RSBAC state unknown
884 kang 1.105
885     *hardened-sources-2.4.32-r7 (10 Jul 2006)
886    
887     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
888     +hardened-sources-2.4.32-r7.ebuild:
889     Bump PaX for RSBAC to test-17
890 johnm 1.104
891     *hardened-sources-2.6.16-r9 (03 Jul 2006)
892    
893     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
894     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
895     hardened-sources-2.6.16 bump to latest -base.
896 solar 1.103
897     *hardened-sources-2.4.32-r6 (30 Jun 2006)
898    
899     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
900     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
901     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
902     sysctl controlable resource logging
903 johnm 1.102
904     *hardened-sources-2.6.16-r7 (05 Jun 2006)
905    
906     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
907     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
908     push new 2.6.16 release in preparation for stable
909 solar 1.101
910     22 May 2006; <solar@gentoo.org> :
911     - redigest bug 134002
912 kang 1.100
913     *hardened-sources-2.4.32-r5 (16 May 2006)
914    
915     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
916     +hardened-sources-2.4.32-r5.ebuild:
917     Fixes rsbac common patching (new patch in new -r5 patchset)
918 solar 1.99
919     *hardened-sources-2.4.32-r4 (13 May 2006)
920    
921     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
922     +hardened-sources-2.4.32-r4.ebuild:
923     - security bumps
924 johnm 1.98
925     *hardened-sources-2.6.16-r6 (03 May 2006)
926    
927     03 May 2006; John Mylchreest <johnm@gentoo.org>
928     +hardened-sources-2.6.16-r6.ebuild:
929     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
930 johnm 1.97
931     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
932     hardened-sources-2.6.14-r8.ebuild:
933     fix x86_64 build problem, this will delay the digest issue again for a short
934     while but it will sort itself out
935 johnm 1.96
936     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
937     hardened-sources-2.6.14-r8.ebuild:
938     bump hardened patchset
939 antarus 1.94
940     27 Apr 2006; Alec Warner <antarus@gentoo.org>
941     files/digest-hardened-sources-2.4.32-r2,
942     files/digest-hardened-sources-2.4.32-r3,
943     files/digest-hardened-sources-2.6.14-r8, Manifest:
944     Fixing duff SHA256 digests: Bug # 131293
945 johnm 1.93
946 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
947    
948     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
949     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
950     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
951     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
952     cleanup of old uneccessary sources
953    
954 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
955     fix digest
956 johnm 1.92
957     *hardened-sources-2.6.14-r8 (20 Apr 2006)
958    
959     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
960     +hardened-sources-2.6.14-r8.ebuild:
961     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
962 johnm 1.91
963     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
964     Turning on gpg-signing again, and recomitting
965 johnm 1.90
966     *hardened-sources-2.6.16-r4 (20 Apr 2006)
967    
968     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
969     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
970     +hardened-sources-2.6.16-r4.ebuild:
971     Fix numerous security vulns
972 solar 1.89
973     *hardened-sources-2.4.32-r3 (16 Apr 2006)
974    
975     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
976     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
977     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
978     - security bump for bug #112791. Removed old ebuilds
979 johnm 1.88
980     *hardened-sources-2.6.16-r3 (15 Apr 2006)
981    
982     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
983     +hardened-sources-2.6.16-r3.ebuild:
984     Removing silly localversion which I missed
985 johnm 1.87
986     *hardened-sources-2.6.14-r7 (14 Apr 2006)
987    
988     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
989     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
990     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
991 johnm 1.86
992     *hardened-sources-2.6.16-r2 (13 Apr 2006)
993    
994     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
995     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
996     +hardened-sources-2.6.16-r2.ebuild:
997     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
998     labels, dropping USERGROUP define fixes, since these were merged mainstream.
999 johnm 1.85
1000     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1001    
1002     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1003     +hardened-sources-2.6.16-r1.ebuild:
1004     Bumping to include ppc build fix and 2.6.16.3
1005 tsunam 1.84
1006     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1007     hardened-sources-2.6.14-r6.ebuild:
1008     Stable on x86; bug #127718
1009 johnm 1.83
1010     *hardened-sources-2.6.16 (31 Mar 2006)
1011    
1012     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1013     +hardened-sources-2.6.16.ebuild:
1014     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1015     2.6.16.1
1016 cryos 1.82
1017     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1018     hardened-sources-2.6.14-r6.ebuild:
1019     Stable on amd64, bug 127718.
1020 nixnut 1.81
1021     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1022     Stable on ppc. Bug #127718
1023 johnm 1.80
1024     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1025     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1026     -hardened-sources-2.6.14-r4.ebuild:
1027     Cleanup.
1028 johnm 1.79
1029     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1030    
1031     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1032     +hardened-sources-2.6.14-r6.ebuild:
1033     Fixes grsec policy recreation bug and adds a
1034     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1035 solar 1.78
1036     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1037     - stable on x86
1038 hansmi 1.77
1039     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1040     hardened-sources-2.6.14-r5.ebuild:
1041     Stable on ppc.
1042 johnm 1.76
1043     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1044    
1045     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1046     +hardened-sources-2.6.14-r5.ebuild:
1047     fixing every known exploit
1048 solar 1.75
1049     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1050    
1051     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1052     +hardened-sources-2.4.32-r2.ebuild:
1053     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1054 solar 1.74
1055     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1056    
1057     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1058     - version bump for new genpatches which fix up a few sec holes
1059 solar 1.73
1060     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1061    
1062     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1063     - revision bump to add misc vital linux kernel security patches.
1064 johnm 1.72
1065     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1066    
1067     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1068     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1069     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1070 johnm 1.71
1071     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1072     hardened-sources-2.6.14-r2.ebuild:
1073     making x86 & amd64 stable following testing.
1074 johnm 1.70
1075     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1076    
1077     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1078     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1079     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1080     network hooks.
1081 johnm 1.69
1082     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1083     hardened-sources-2.6.14-r1.ebuild:
1084     bumping to stable early for sec fix on x86 & amd64
1085 johnm 1.68
1086     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1087    
1088     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1089     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1090     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1091 solar 1.67
1092     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1093     - stable on x86 security bug #114227 CAN-2005-3257
1094 kang 1.66
1095     *hardened-sources-2.4.32 (19 Nov 2005)
1096    
1097     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1098     +hardened-sources-2.4.32.ebuild:
1099     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1100     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1101     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1102     rsbac >> /etc/portage/package.use)
1103 johnm 1.65
1104     *hardened-sources-2.6.14 (14 Nov 2005)
1105    
1106     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1107     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1108     Bumping 2.6 series to 2.6.14.2
1109 johnm 1.64
1110     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1111    
1112     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1113     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1114     +hardened-sources-2.6.13-r2.ebuild:
1115     Fixes minor build error in ppc.
1116 johnm 1.63
1117     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1118    
1119     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1120     +hardened-sources-2.6.13-r1.ebuild:
1121     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1122     2.6.13.4, fixes some major amd64 stability problems.
1123 johnm 1.62
1124     *hardened-sources-2.6.13 (16 Sep 2005)
1125    
1126     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1127     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1128     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1129     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1130     users should test this thoroughly.
1131 solar 1.61
1132     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1133     - stable on x86
1134 johnm 1.60
1135     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1136    
1137     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1138     +hardened-sources-2.6.11-r15.ebuild:
1139     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1140     grsec redefining curr_ip struct.
1141 solar 1.59
1142     *hardened-sources-2.4.31 (20 Jun 2005)
1143    
1144     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1145     initial import of 2.4.31 tree
1146 johnm 1.58
1147     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1148    
1149     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1150     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1151     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1152     naming scheme to abide by genpatches
1153 johnm 1.57
1154     *hardened-sources-2.6.11-r13 (18 May 2005)
1155    
1156     18 May 2005; John Mylchreest <johnm@gentoo.org>
1157     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1158     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1159     target. sorry about that. Fixes bug #93022
1160 johnm 1.56
1161     *hardened-sources-2.6.11-r12 (17 May 2005)
1162    
1163     17 May 2005; John Mylchreest <johnm@gentoo.org>
1164     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1165     +hardened-sources-2.6.11-r12.ebuild:
1166     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1167     merges in genpatches-base
1168 johnm 1.55
1169     *hardened-sources-2.6.11-r12 (17 May 2005)
1170    
1171     17 May 2005; John Mylchreest <johnm@gentoo.org>
1172     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1173     +hardened-sources-2.6.11-r12.ebuild:
1174     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1175     merges in genpatches-base
1176 solar 1.54
1177     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1178     -files/2.4.27-cmdline-race.patch,
1179     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1180     -files/2.4.28-grsec-binfmt_a.out.patch,
1181     -files/2.4.28-grsec-cmdline-race.patch,
1182     -files/2.4.28-selinux-binfmt_a.out.patch,
1183     -files/2.4.28-selinux-cmdline-race.patch,
1184     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1185     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1186     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1187     cleanup..
1188 solar 1.53
1189     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1190    
1191     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1192     - disable aout by default
1193 solar 1.52
1194     *hardened-sources-2.4.30 (18 Apr 2005)
1195    
1196     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1197     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1198     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1199     use
1200 tocharian 1.50
1201 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1202    
1203     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1204     +hardened-sources-2.4.29.ebuild:
1205     New hardened-patches-2.4-29.0 patchball.
1206     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1207    
1208     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1209    
1210     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1211     +hardened-sources-2.4.28-r5.ebuild:
1212     Added a fix for a PaX vulnerability.
1213    
1214     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1215 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1216     Stable on x86
1217 solar 1.49
1218     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1219     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1220     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1221     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1222     - fixed/added RDEPEND= in all kernel-2 ebuilds
1223 tocharian 1.48
1224     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1225    
1226     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1227     +hardened-sources-2.4.28-r4.ebuild:
1228     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1229     backport of neighbour hash updates.
1230 tocharian 1.47
1231     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1232     hardened-sources-2.4.28-r3.ebuild:
1233     Stable on x86
1234 tseng 1.46
1235     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1236    
1237     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1238     +hardened-sources-2.6.10-r3.ebuild:
1239     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1240     in 2005.0
1241 tocharian 1.45
1242     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1243     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1244     hardened-sources-2.4.28-r2.ebuild:
1245     Mark stable on x86
1246 tocharian 1.44
1247     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1248    
1249     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1250     +hardened-sources-2.4.28-r3.ebuild:
1251     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1252 tocharian 1.43
1253     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1254     hardened-sources-2.4.28.ebuild:
1255     Mark stable on x86.
1256 tocharian 1.42
1257     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1258    
1259     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1260     +hardened-sources-2.4.28-r2.ebuild:
1261     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1262     Mazinger for grsecurity patches as well.
1263 plasmaroo 1.41
1264     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1265    
1266     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1267     Security bump. Thank tocharian for rolling a new patchset...
1268 solar 1.40
1269     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1270     +files/2.4.28-grsec-cmdline-race.patch,
1271     +files/2.4.28-selinux-binfmt_a.out.patch,
1272     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1273     - Round up remaining security patches that appear to be missing in 2.4.28. -
1274     PaX standalone updated to current. hgpv=28.1
1275 solar 1.39
1276     *hardened-sources-2.4.28 (28 Nov 2004)
1277    
1278     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1279     security bump. Thank tocharian for rolling a new patchset
1280 scox 1.31
1281 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1282    
1283     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1284     +hardened-sources-2.4.27-r3.ebuild:
1285     Applies the new 2.4-27.2 patchball which updates
1286     GRSecurity to the 2.0.1 version.
1287    
1288 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1289    
1290     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1291     +hardened-sources-2.4.27-r2.ebuild:
1292     Version bump.
1293     This version uses the new 2.4-27.1 patchball which updates
1294     both the SELinux PaX hooks patch and the SELinux headers.
1295    
1296 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1297    
1298     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1299     +hardened-sources-2.4.27-r1.ebuild,
1300     -hardened-sources-2.4.27.ebuild,
1301     +files/2.4.27-cmdline-race.patch:
1302     Version bump, fix for cmdline race. See bug #59905.
1303    
1304     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1305    
1306     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1307     +hardened-sources-2.4.26-r6.ebuild,
1308     -hardened-sources-2.4.26-r5.ebuild,
1309     -hardened-sources-2.4.26-r4.ebuild,
1310     +files/2.4.26-cmdline-race.patch:
1311     Version bump, fix for cmdline race. See bug #59905.
1312    
1313 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1314    
1315     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1316     +hardened-sources-2.4.27.ebuild,
1317     +files/2.4.27-CAN-2004-0394.patch:
1318     Ported the patchball to the 2.4.27 kernel version.
1319    
1320 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1321    
1322     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1323     +hardened-sources-2.4.26-r5.ebuild:
1324 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1325 scox 1.34 It adds the following features:
1326     - Squashfs
1327     - Ebtables
1328     - Netdev random (core+drivers)
1329     - Watchdog Timer (WDT) fix.
1330    
1331 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1332    
1333     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1334     +hardened-sources-2.4.26-r4.ebuild,
1335     +files/2.4.26-CAN-2004-0415.patch,
1336     -hardened-sources-2.4.26-3:
1337     Version bump, fix for CAN 0415, see bug #59378.
1338    
1339 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1340    
1341     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1342     +hardened-sources-2.4.26-r3.ebuild,
1343     +files/2.4.26-CAN-2004-0497.patch,
1344     -hardened-sources-2.4.26-r2.ebuild:
1345     Version bump, fixed CAN 0497, see bug #56171.
1346    
1347 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1348    
1349     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1350 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1351 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1352     +files/2.4.26-CAN-2004-0535.patch,
1353     -hardened-sources-2.4.26-r1.ebuild:
1354     Fixes for both CAN 0495 and 0535, see bug #54976
1355 pvdabeel 1.27
1356 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1357     hardened-sources-2.4.26-r1.ebuild:
1358     QA - fix use invocation
1359 scox 1.28
1360     *hardened-sources-2.4.26-r1 (22 June 2004)
1361    
1362     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1363     +hardened-sources-2.4.26-r1.ebuild,
1364     +files/2.4.26-CAN-2004-0394.patch,
1365     +files/2.4.26-signal-race.patch,
1366     -hardened-sources-2.4.26.ebuild,
1367     -hardened-sources-2.4.24-r3.ebuild:
1368     Version bump for the CAN-2004-0394 issue and bug #53804
1369     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1370    
1371    
1372 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1373     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1374     Masked hardened-sources-2.4.26.ebuild broken for ppc
1375    
1376     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1377     hardened-sources-2.4.24-r3.ebuild:
1378     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1379 plasmaroo 1.25
1380 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1381    
1382     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1383     +hardened-sources-2.4.26.ebuild:
1384     Updated hardened-sources for the 2.4.26 kernel
1385     Removed broken components, updated almost everything.
1386    
1387 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1388    
1389     17 Apr 2004; <plasmaroo@gentoo.org>
1390     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1391     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1392     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1393     +hardened-sources-2.4.24-r3.ebuild:
1394     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1395     vulnerabilities. Old revisions removed.
1396 plasmaroo 1.24
1397     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1398    
1399     15 Apr 2004; <plasmaroo@gentoo.org>
1400     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1401     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1402     Version bump for the CAN-2004-0109 issue; bug #47881.
1403 aliz 1.23
1404     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1405     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1406     Add eutils to inherit.
1407 plasmaroo 1.22
1408     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1409    
1410     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1411     files/hardened-sources-2.4.24.munmap.patch:
1412     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1413 scox 1.19
1414 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1415 scox 1.26
1416 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1417     hardened-sources-2.4.24.ebuild:
1418     Version bump, updated most of the components.
1419     This release includes the following:
1420    
1421     - Hardened security
1422     - Netfilter patch-o-matic 20031219
1423     - FreeSWAN 2.04 & x509 1.4.8
1424     - EVMS 2.2.2
1425     - XFS 1.3.1
1426     - cryptoloop jari
1427     - grsecurity 2.0-rc4
1428     - SELinux
1429     - PaX 200402060000
1430     - PaX Obscurity 200308302223
1431     - Others...
1432    
1433     Neither -ck nor systrace are included anymore.
1434    
1435 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1436    
1437     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1438     hardened-sources-2.4.22-r2.ebuild:
1439 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1440 scox 1.19
1441     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1442 iggy 1.17
1443     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1444 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1445 iggy 1.16
1446     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1447 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1448     Version bump for the 'do_brk' vulnerability.
1449 iggy 1.15
1450     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1451     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1452     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1453     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1454 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1455 frogger 1.14
1456     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1457     hardened-sources-2.4.22.ebuild:
1458 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1459     components. These are no longer handled in the kernel
1460     so this code was not necessary.
1461 frogger 1.13
1462     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1463     New 2.4.22 based hardened-sources thanks to
1464     Phil West <p.west@computer.org>.
1465    
1466     These sources include:
1467 plasmaroo 1.18 - New SELinux API
1468     - Updated CK-base
1469     - Updated GRSec
1470     - Systrace
1471     - SuperFreeS/WAN 1.99.8
1472     - Propolice kernel build support
1473     - EVMS
1474     - Other various security related patches
1475 frogger 1.11
1476 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1477    
1478     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1479     Updated hardened-sources based on the 2.4.21 Linux kernel.
1480     This includes updates to most major components such as:
1481 plasmaroo 1.18 - ck-base-0306300059
1482     - selinux-2.4-2003071106
1483     - grsecurity-2.0-rc1
1484     - Updated IPTables patch-o-matic
1485     - Updated SuperFreeS/WAN
1486    
1487 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1488     updated patch set ready for the 2.4.21 based kernel.
1489    
1490 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1491     Initial import of hardened-sources-2.4.20-r4. This revision
1492     includes only a few changes, but one of these is an important
1493     security fix. It is recommended all users of hardened-sources
1494     upgrade to this release.
1495 plasmaroo 1.18
1496 frogger 1.11 - ioperm bug fix
1497     - fixed compilation failure when building without GRSec
1498 plasmaroo 1.18
1499 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1500     due to time constraints, but is planned for inclusion in the near
1501     future.
1502 msterret 1.10
1503     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1504    
1505     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1506     hardened-sources-2.4.20-r3.ebuild:
1507 plasmaroo 1.18 Add Header...
1508 frogger 1.9
1509     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1510     hardened-sources-2.4.20-r3.ebuild:
1511     Removed warnings from ebuild. This kernel should be safe to
1512     use at this point.
1513 frogger 1.8
1514     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1515    
1516     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1517     hardened-sources-2.4.20-r3.ebuild:
1518     New revision. Includes the following changes over -r2:
1519 plasmaroo 1.18
1520 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1521     - Super FreeS/WAN 1.99.7rc2
1522     - PaX for the LSM/SELinux branch
1523     - GRSecurity 2.0-pre4 (role based access control)
1524     - Systrace 1.3
1525     - EXT3 fixes
1526     - EVMS 2.0.1
1527     - GCC 3.1+ compile optimizations
1528     - ProPolice kernel build support
1529     - Hashing table security fixes
1530 frogger 1.3
1531     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1532 frogger 1.7
1533     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1534     Initial import of hardened-sources-r2. This new
1535     ebuild includes many new performance and security
1536     related patches. As in -r1, it will patch in
1537     LSM/SELinux if "selinux" is in USE, otherwise it
1538     will patch in GRSecurity. The following patches
1539     are included in this revision:
1540 plasmaroo 1.18
1541 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1542     (pulled from the base CK patch)
1543     - ptrace exploit patch for the LSM kernel
1544     (the GRSec patch already fixes this)
1545     - LSM 2.4-2003040709
1546     - SELinux 2.4-2003040709
1547     - Systrace v1.2
1548     - IPTables patch-o-matic base patches - 20030107
1549     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1550     - Super FreeS/WAN 1.99.6.1
1551     - GRSecurity 1.9.9g
1552     - MPPE
1553     - EXT3 data journal fix
1554     - CIPE 1.5.4
1555 frogger 1.6
1556     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1557     hardened-sources-2.4.20-r1.ebuild, manifest:
1558 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1559 frogger 1.5
1560     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1561     hardened-sources-2.4.20-r1.ebuild:
1562     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1563     is patched in instead. Ptrace patches for selinux have also been added. In
1564     either case, systrace support will be patched in as well.
1565 frogger 1.3
1566     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1567     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1568 plasmaroo 1.18 Revision bump for new sources.
1569 frogger 1.4
1570 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1571 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1572 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1573 method 1.1
1574 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1575    
1576 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1577     hardened-sources-2.4.20.ebuild:
1578 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20